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CIAIMS : 

What is claimed is: 

1. A method for authorizing offloading of a grid job in 
a grid computing system, the method comprising: 

submitting a grid job to a primary grid resources- 
responsive to a certificate request from the primary 

grid resource, identifying a secondary grid resource that 

is to run the grid job; 

performing authorization with the secondary grid 

resource; and 

if authorization with the grid resource fails, 

generating an invalid proxy certificate and sending the 

invalid proxy certificate to the primary grid resource. 

2. The method of claim 1, further comprising: 

if authorization with the grid resource fails, 
generating a valid proxy certificate; and 

sending the valid proxy certificate to the primary 
grid resource. 

3. The method of claim 1, wherein submitting a grid job 
to a primary grid resource includes submitting the grid 
job to a grid scheduler, 

wherein the grid scheduler selects a primary grid 
resource and sends the grid job to the primary grid 
resource . 

4. The method of claim 1, wherein identifying a 
secondary grid resource that is to run the grid job 
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includes submitting a query grid job to the primary grid 
resource inquiring about an identity of the secondary 
resource . 

5. The method of claim 1, wherein identifying a 
secondary grid resource that is to run the grid job 
includes detecting an address of the secondary grid 
resource in the certificate request. 

6. The method of claim 1, wherein performing 
authorization with the secondary grid resource includes 
submitting an authorization job to the secondary grid 
resource. 

7. The method of claim 6, wherein the authorization job 
identifies security elements of the secondary resource. 

8. The method of claim 6, wherein the authorization job 
determines at least one of an operating system of the 
secondary grid resource, security updates installed on 
the secondary grid resource, whether the secondary 
resource has a trusted operating system, whether any 
conflicting grid jobs are running on the secondary grid 
resource . 

9. The method of claim 6, wherein the authorization job 
determines whether a given command is disabled on the 
secondary grid resource. 
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10. The method of claim 1, wherein performing 

authorization with the secondary grid resource includes 
determining whether the secondary grid resource is 
included in a black list. 

11. The method of claim 1, wherein performing 
authorization with the secondary grid resource includes 
determining whether the secondary grid resource is 
included in a white list. 

12. The method of claim 1, wherein performing 
authorization with the secondary grid resource includes 
performing authorization with the secondary grid resource 
using one or more rules. 

13. An apparatus for authorizing offloading of a grid 
job in a grid computing system, the apparatus comprising: 

means for submitting a grid job to a primary grid 
resource; 

means, responsive to a certificate request from the 
primary grid resource, for identifying a secondary grid 
resource that is to run the grid job; 

means for performing authorization with the 
secondary grid resource; and 

means for generating an invalid proxy certificate 
and sending the invalid proxy certificate to the primary 
grid resource if authorization with the grid resource 
fails . 
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14. The apparatus of claim 13, further comprising: 
means for generating a valid proxy certificate and 

sending the valid proxy certificate to the primary grid 
resource if authorization with the grid resource fails. 

15. The apparatus of claim 13, wherein the means for 
submitting a grid job to a primary grid resource includes 
means for submitting the grid job to a grid scheduler, 

wherein the grid scheduler selects a primary grid 
resource and sends the grid job to the primary grid 
resource . 

16. The apparatus of claim 13, wherein the means for 
identifying a secondary grid resource that is to run the 
grid job includes means for submitting a query grid job 
to the primary grid resource inquiring about an identity 
of the secondary resource. 

17. The apparatus of claim 13, wherein the means for 
identifying a secondary grid resource that is to run the 
grid job includes means for detecting an address of the 
secondary grid resource in the certificate request. 

18. The apparatus of claim 13, wherein the means for 
performing authorization with the secondary grid resource 
includes means for submitting an authorization job to the 
secondary grid resource. 
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19. The apparatus of claim 18, wherein the authorization 
job identifies security elements of the secondary 
resource. 

20. A computer program product, in a computer readable 
medium, for authorizing offloading of a grid job in a 
grid computing system, the computer program product 
comprising : 

instructions for submitting a grid job to a primary 
grid resource; 

instructions, responsive to a certificate request 
from the primary grid resource, for identifying a 
secondary grid resource that is to run the grid job; 

instructions for performing authorization with the 
secondary grid resource; and 

instructions for generating an invalid proxy 
certificate and sending the invalid proxy certificate to 
the primary grid resource if authorization with the grid 
resource fails. 



